Dynamic optimization of client application access via a secure access service edge (sase) network optimization controller (noc)

A method comprising:

• obtaining, from a secure access service edge (SASE) device executing a security service, a first data set defining security performance metric provided by the security service;
• obtaining, from the SASE, a second data set defining a network performance metric associated with a network device;
• defining a policy based at least in part on the first data set and the second data set;
• determining if the policy has been violated;
• and
• changing a first access modality provided for the network device to access an end host to a second access modality based at least in part on the policy being violated, the first access modality and the second access modality defining different methods of access to the end host.

A non-transitory computer-readable medium storing instructions that, when executed, cause one or more processors to perform operations, comprising:

• obtaining, from a secure access service edge (SASE) device executing a security service, a first data set defining security performance metric provided by the security service;
• obtaining, from the SASE, a second data set defining a network performance metric associated with a network device;
• defining a policy based at least in part on the first data set and the second data set;
• determining if the policy has been violated;
• and
• changing a first access modality provided for the network device to access an end host to a second access modality based at least in part on the policy being violated, the first access modality and the second access modality defining different methods of access to the end host.